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ABSTRACT 


An  expert  system  that  provides  fault  detection  and  limited  fault  tol¬ 
erance  was  designed  for  a  generic  aircraft  model.  A  "best-first"  search 
among  applicable  rules  was  utilized,  leading  to  efficient  recognition  and 
processing  of  abnormal  situations.  Results  showed  that  such  an  expert 
system  is  feasible  and  that  it  could  contribute  to  increased  reliability  of 
aircraft  system  operation  without  a  high  degree  of  complexity. 
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1.  INTRODUCTION 
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Modern  aircraft  systems  are  increasingly  sophisticated  in  response  to 
demands  for  higher  performance.  This  trend  has  resulted  in  the  design 
of  complicated  control  modules  whose  continuous  service  is  the  key  to  a 
safe  and  successful  flight.  The  general  strategy  used  to  ensure  online 
operation  of  these  units  is  to  provide  enough  physical  and  analytical 
redundancy  so  that  individual  component  failures  do  not  jeopardize  a 
mission.  Although  it  is  crucial  for  the  systems  to  have  backups,  it  is 
equally  important  to  supply  means  to  detect  when  they  have  suffered  a 
degradation  or  even  loss  of  performance.  Many  sensors  are  added  to 
accomplish  these  supervisory  tasks,  but  In  doing  so  we  have  only  ac¬ 
centuated  the  need  for  more  fault  tolerance  and  detection. 

An  analysis  of  the  situation  shows  that  there  is  an  information  over¬ 
load,  which  calls  for  an  intelligent  decision-maker  that  can  oversee  the 
status  of  each  system  and  take  appropriate  actions  based  on  the  incom¬ 
ing  data.  This  requirement  can  be  satisfactorily  met  by  utilizing  some  of 
the  results  from  the  emerging  field  of  artificial  intelligence  (Al). 

Artificial  Intelligence  is  often  associated  with  natural  language  pro¬ 
cessing  and  mathematical  theorem  proving,  but  it  has  expanded  in  re¬ 
cent  years  to  include  other  areas,  such  as  automated  decision  making 
using  expert  systems.  An  expert  system  attempts  to  pool  the  knowledge 
of  experts  into  production  rules,  which  are  usually  in  the  form  of  "if- 
and-then"  statements.  Its  purpose  is  to  provide  the  users  with  a  tool 
to  solve  relatively  complicated  problems  by  comparing  different  courses 
of  action  an  '  choosing  what  appears  to  be  the  best. 
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The  alternative  that  Al  offers  to  the  previous  problem,  therefore,  is 
to  design  a  system  which  is  sufficiently  smart  to  figure  out  if  a  mal¬ 
function  has  occurred  and  which  is  capable  of  taking  remedial  actions. 
The  long-term  objectives  of  the  present  work  are  to  develop  and  con¬ 
figure  necessary  hardware  and  software  for  a  system  that  will  tackle 
the  issues  just  raised.  The  ultimate  goal  is  to  test  the  functionality 
and  robustness  of  such  a  system  onboard  airplanes  or  helicopters  in  a 
realistic  scenario.  The  short-term  objectives  are  to  ascertain  the  feasi¬ 
bility  of  the  Al  approach  as  well  as  its  complexity. 

In  the  following  text  we  describe  the  preliminary  implementation  of 
an  expert  system,  called  FDIES  (Fault  Detection  and  Identification  Ex¬ 
pert  System),  which  addresses  some  of  the  issues  of  fault-detection.  A 
block  diagram  of  it  is  shown  in  Fig.  1  .  Section  2  outlines  the  baseline 
for  the  generic  aircraft  used  in  our  study.  Section  3  describes  the  sys¬ 
tem  databases,  which  are  the  knowledge  source  for  the  expert  system. 
Section  4  explains  the  rules,  which  constitute  the  reasoning  power  of 
FDIES.  Section  5  details  the  operation  of  FDIES.  Section  6  gives  a 
sample  run  of  FDIES  for  three  cases.  Finally  Section  7  contains  the 
conclusions  and  statements  of  the  future  work. 
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Figure  1:  Fault  Detection  and  Identification  Expert  System 

Block  Diagram 

2.  SYSTEM  BASELINE 

We  chose  to  deal  with  a  generic  airplane  model  which  has  a  set  of 
components  that  normally  would  be  found  in  a  modern  aircraft.  These 
components  are  located  in  five  sections  of  the  aircraft:  left  wing,  right 
wing,  nose,  tail,  and  cockpit  (Fig.  2).  A  sixth  section,  rotor,  is 
available  when  we  are  dealing  with  helicopters.  A  list  of  specific  devices 
assumed  to  be  on  the  aircraft  is  found  in  Appendix  A. 
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left  wing 


cockpit 


right  wing 


Figure  2:  The  Generic  Aircraft 


Several  assumptions  were  made:  an  airspeed-sensor  plus  a  backup 
are  at  the  tip  of  the  left-wing  and  at  the  nose.  Static  pressure  sensors 
are  at  the  roots  of  the  each  wing.  Engines  are  mounted  on  the  wings  as 
well  in  the  tail  section.  Ailerons  are  split  into  two  independent  sections, 
one  at  tip  and  other  at  the  mid-section  of  the  wing.  All  control  sur¬ 
faces  are  driven  by  doubly  redundant  electric  actuators;  hydraulic  ac¬ 
tuators  would  be  handled  in  similar  fashion.  All  sensor  outputs  are 
converted  to  digital  format  and  checked  by  the  onboard  computer  before 
being  displayed  on  CRTs  in  the  cockpit.  Many  devices  are  physically 
redundant,  and  a  number  of  them  have  analytical  equivalents  as  well. 
The  devices  generally  are  linked  or  related  to  other  devices.  These 


and  other  pertinent  data  are  all  available  (as  property  lists)  to  the  ex¬ 
pert  system  in  a  database  called  TIGER.  DATA.  The  current  readings 
and  status  of  devices  are  posted  in  a  separate  database  called 
BULLETIN.  These  two  databases  are  described  in  more  detail  in  the 
section  that  follows. 

The  programming  language  employed  is  LISP,  which  is  widely  used 
by  the  Al  community.  Its  advantages  are  ease  of  constructing  and  mod¬ 
ifying  the  databases  (in  form  of  lists),  as  well  as  good  symbolic  manip¬ 
ulation  capability.  The  disadvantage  is  that  running  LISP  may  require 
long  processing  time;  with  the  current  rate  of  increase  in  computation 
speeds,  this  should  soon  be  a  minor  issue. 


3.  SYSTEM  DATABASES 


The  expert  system  obtains  information  concerning  the  aircraft  sys¬ 
tem's  current  structure  and  status  from  two  databases:  one  dynamic 
(BULLETIN),  and  the  other  static  (TIGER.  DATA) . 

The  dynamic  database,  BULLETIN  (Appendix  B),  contains  the  read¬ 
ings  and  status  of  all  devices;  it  is  constantly  updated  by  a  separate 
front-end  system  which  will  be  part  of  our  implementation  at  a  later 
stage.  BULLETIN  also  keeps  a  list  of  abnormal  devices,  that  is,  any 
devices  that  are  either  faulty  or  "down."  Any  alert  on  the  abnormal  be¬ 
haviour  of  a  device  is  also  posted  here.  This  is  similar  to  the  "black¬ 
board"  approach  used  in  the  HEARSAY  system  [1].  The  format  of 
BULLETIN  is  shown  in  Fig.  3  .  The  section  name  is  listed  first,  fol¬ 
lowed  by  readings  or  status  of  all  devices  within  that  section.  The  last 
entries  under  the  heading  of  "abnormal-devices"  are  reserved  for  any 
new  alert  and  for  keeping  track  of  all  faulty  devices. 

(left-wing 

((airspeed-sensor  self  50.  phys-equiv  50.  analy-equiv  50.) 

(engine  ok) ... ) 
right-wing 
((engine  down) 

(tank  ok) .  . . ) 


abnormal -devices 
((left-wing  aileron-1  new-alert) 
(right-wing  engine  down))) 


Figure  3:  An  Example  of  Output  from  BULLETIN 


The  static  database,  TIGER. DATA,  possesses  a  complete  record  of 
sections'  devices  (see  Appendix  C).  It  is  actually  implemented  by  at¬ 
taching  facts  concerning  the  device  as  the  property-list  of  the  section's 
name  under  the  device's  name.  This  is  fashioned  after  Minsky's  frame 
approach  [2].  The  database  is  built  by  calling  the  procedure  DEVICE, 
as  illustrated  in  the  next  figure. 


(device  actuator-1 
IN  left-wing 
((status  ok) 

(power-source  batt-l-node) 

(function  actuator) 

(location  middle) 

(same-location  (engine  temp-sensor  rpm-sensor  ...)) 
(related-devices  (actuator-2)) 

(gain  10.0) 

(linked-to  ((stick-1  stick-2)  (aileron-1  aileron-2))) 
(physical-equiv  actuator-2))) 


Figure  4:  An  Example  of  Adding  an  Entry  to  TIGER. DATA 


After  the  evaluation  of  the  procedure  DEVICE  shown  in  Fig.  4, 
FDIES  will  record  the  device  "actuator-1"  under  the  left-wing  in  its 
database.  Its  default  assumption  is  that  the  left-wing  actuator-1 's  status 
is  "ok";  that  its  power  source  is  "battery-1";  that  it  is  located  at  the 
middle  of  the  left  wing;  that  at  the  same  location  we  find  also  "engine", 
"temp-sensor",...;  that  it  is  linked  forward  to  "stick-1"  and  "stick-2" 
and  backward  to  "aileron-1"  and  "aileron-2."  In  the  event  that  a  device 
(actuator-1)  is  lost,  the  devices  of  the  first  list  may  still  be  able  to 
perform  their  functions  if  they  have  other  links  (actuator-2),  but  the 
devices  on  the  second-list  are  uncontrollable  by  the  lost  device  (but  are 
certainly  controllable  by  its  physical  equivalent).  Thus,  the  devices  in 


the  first  list  will  be  marked  as  "broken-link",  whereas  those  on  the 
second  list  will  be  marked  "unusable." 


On  many  occasions  a  device  in  one  section  is  connected  to  devices  of 
other  sections.  In  our  previous  example,  the  left-wing’s  "actuator-1"  is 
connected  to  the  cockpit's  "stick-1"  and  "stick-2."  Since  it  is  not  cor¬ 
rect  to  declare  devices  for  one  section  in  other  sections,  yet  it  is  cru¬ 
cial  for  the  expert  system  to  know  how  devices  are  linked,  we  include  a 
special  entry,  "inter-equiv",  under  each  section.  It  plays  the  role  of  an 
interconnection  map  among  different  sections  of  the  aircraft.  This  is  il¬ 
lustrated  in  Fig.  5  . 


(device  inter-equiv 
OF  left-wing 
((batt-1  (nose  batt-1)) 
(batt-2  (nose  batt-2)) 

(stick-1  (cockpit  stick-1)) 


Figure  5:  Typical  Entry  of  an  Inter-equiv  Table 


When  searching  through  the  database,  if  FDIES  encounters  any  compo¬ 
nent  that  is  not  explicitly  declared  within  a  section,  it  automatically 
looks  in  the  "inter-equiv"  table  to  see  if  it  is  declared  in  another  sec¬ 
tion.  The  necessity  of  inter-equiv  becomes  apparent  when  we  consider 
the  situation  in  which  the  expert  system  discovers  that  battery-1 
(which  is  resident  in  the  nose  section)  is  drained.  It  then  must  find  all 
devices  (many  of  which  are  in  other  sections)  and  mark  them  "unusa¬ 
ble".  FDIES  accomplishes  this  task  by  looking  up  battery-l's  "link-to" 
list  and  the  inter-equiv  table. 
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In  summary,  FDIES's  knowledge  is  contained  in  BULLETIN  and 
TIGER. DATA.  By  accessing  them,  it  remains  informed  of  the  relation- 


4.  THE  RULE  SPACE 


The  expert  system  currently  utilizes  ten  rules  , which  are  divided 
into  four  groups,  to  handle  failures.  Group  1  consists  of  Rules  #1,  #2, 
and  410.  They  are  used  to  mark  devices  in  the  databases  as  "down"  or 
faulty  or  to  restore  them  to  normal  status,  respectively.  They  also  are 
responsible  for  propagating  the  effects  of  the  fault  to  the  devices  which 
are  linked  to  the  failed  one.  Group  2  has  Rules  #3  and  44;  they  are 
invoked  when  a  device's  reading  differs  from  its  equivalent  device. 
Group  3  consists  of  Rule  49  alone,  whose  application  occurs  when  the 
pilot  makes  an  inquiry  regarding,  for  instance,  an  ill-behaving  device; 
in  this  case  FDIES  simply  responds  to  the  pilot's  commands.  Finally, 
Group  4  encompasses  Rules  45  to  Rule  48;  these  rules  are  evoked  to 
decipher  any  alert  related  to  abnormal  components.  A  complete  program 
listing  of  these  rules  can  be  found  in  Appendix  D.  A  verbal  description 
of  each  rule  is  presented  in  Table  1  . 

Note  that  we  have  implicitly  guided  our  application  of  rules  .  When 
a  device  is  found  abnormal,  then  Rule  45  is  first  checked  to  see  if  all 
devices  in  the  same  location  are  also  abnormal.  If  not,  then  Rule  46  is 
called.  It  Rule  46  is  not  applicable,  it  will  try  Rule  47.  Rule48  will  ap¬ 
ply  only  when  either  Rule  45  or  Rule  46  is  satisfied.  See  Fig.  6  . 

The  "if"  parts  of  these  rules  are  not  compared  exhaustively  against 
the  current  alerts.  FDIES  retrieves  and  applies  only  those  rules  which 
are  pertinent  to  the  situation.  Usually  one  or  two  will  suffice.  This  is  a 
simple  form  of  "best-first"  search,  which  is  the  technique  that  focuses 
the  attention  of  an  expert  system  to  the  most  promising  node  [3]. 
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Figure  6:  Searching  in  Rule  Space 
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RULE#1: 

RULE#2: 

RULE#3: 

RULE#4: 

RULE#5: 

RULE#6; 


TABLE  1 
The  Rules 


I F  a  device  is  alerted  as  down, 

THEN  mark  it  "down".  This  also  has  the  side  effect 
of  marking  the  "linked-to"  devices  as  "unusable"  or 
"broken-link. " 


]£  a  device  is  alerted  as  faulty, 
THEN  mark  it  faulty. 


j£  a  device's  reading  is  different  from  that  of  its 
equivalent, 

THEN  check  both  against  the  third  equivalent's  read¬ 
ing  (if  it  exists).  If  two  agree,  then  the  third  one  is 
declared  faulty  (by  issuing  an  alert  on  the 
BULLETIN).  If  none  are  the  same,  then  the  rule 
fails. 


IF  a  device's  behavior  is  different  from  its  analytical 
equivalent, 

THEN  see  if  a  new  gain  or  bias  can  be  found  by  ap¬ 
plying  the  routine  "generate-and-test. " 


I F  a  device's  reading  is  considered  abnormal, 

THEN  check  to  see  if  other  devices  in  the  common  lo¬ 
cation  are  abnormal  as  well.  If  so,  apply  Rule  #8; 
otherwise  apply  Rule  #6. 


I F  a  device's  reading  is  considered  abnormal,  and  it 
has  been  determined  that  some  devices  in  the  same 
location  are  normal, 

THEN  check  to  see  if  related  devices  are  abnormal.  If 
so,  apply  Rule  #8;  otherwise  apply  Rule  #7. 


r 
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TABLE  1  (concluded) 

RULE#?: 

IF  a  device's  reading  is  abnormal,  and  some  related 
devices  have  been  determined  to  be  normal, 

THEN  the  device  is  faulty;  issue  an  alert  to  this  ef¬ 
fect.  (Implicitly,  this  has  the  side-effect  of  removing 
any  action  caused  by  the  abnormality;  e.g.,  an  en¬ 
gine  shutdown  due  to  false  reading  of  a  temperature 
sensor) . 

RULE#8: 

I F  devices  common  to  a  particular  characteristic  are 
all  found  to  be  abnormal, 

THEN  declare  all  of  them  to  be  faulty  and  report  the 
nature  of  the  problem. 

RULE#9: 

I F  the  alert  is  a  request  by  the  pilot  to  check  a  de¬ 
vice's  value, 

THEN  compare  what  the  expert  system  knows  to  what 
the  pilot  believes.  This  command  is  usually  confined 
to  display  devices  that  are  in  the  cockpit. 

RULE#10: 

J_F  the  alert  says  that  a  device  has  returned  to  nor¬ 
mal, 

THEN  restore  the  status  of  the  device  to  "ok"  (in¬ 
cluding  its  "linked-to"  devices). 


5.  THE  EXPERT  SYSTEM  (FDIES) 


The  expert  system's  primary  task  is  to  assure  normal  operation  of 
the  aircraft.  At  present,  it  can  only  decide  when  an  alert  may  be  false, 
when  a  device  is  faulty,  or  when  parts  of  aircraft  are  damaged.  Ulti¬ 
mately,  it  will  be  able  to  produce  new  control  strategies  in  the  face  of 
abnormalities  enabling  the  flight  to  continue  in  safety. 


FDIES  is  made  up  of  several  key  procedure  calls  (Appendix  E).  A 
flow  chart  of  the  system  is  given  in  Fig.  7  The  procedure 
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REPORTER  checks  the  BULLETIN  database  for  irregularities  and  warn¬ 
ings.  If  any  are  found,  REPORTER  issues  an  alert  of  the  proper  type 
(which  is  placed  on  either  the  high-priority  stack  or  the  priority 
stack).  FDIES  then  "pops"  the  top  alert  off  the  stack  and  applies  the 
rules  which  belong  to  that  particular  alert  (by  using  the  procedure 
APPLY-RULES) .  FDIES  iterates  to  make  sure  that  ail  alerts  (which  are 
often  issued  within  the  rule  being  applied)  are  processed. 

Other  procedures  of  interest  which  are  not  directly  utilized  by 
FDIES  are  listed  in  Table  2  .  Some  play  important  roles  in  connection 
with  successful  application  of  rules  (e.g.  the  procedure  SIMILAR),  and 
others  provide  an  interactive  interface  between  the  expert  system  and 
the  pilot  (e.g.,  the  procedure  CHANGE-BULLETIN). 
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TABLE  2 

Some  Utility  Procedures  of  FDIES 


ISSUE-ALERT :  Places  alert  given  on  the  stack.  | 

MARK-DEVICE:  Marks  the  given  device  with  proper  value;  i.e.,  | 

it  changes  the  status  of  the  device  (and  its  "linked-to"  counter-  j 
parts)  on  BULLETIN  and  TIGER. DATA.  | 

CHANGE:  Changes  the  value  of  a  specified  slot  within  a  sec-  j 

tion's  device.  j 

CHANGE-BULLETIN:  Changes  an  entry  in  BULLETIN.  | 

RETRIEVE:  Returns  the  value  of  the  slot  of  the  given  section  j 

device  presently  in  the  TIGER.  DATA.  j 

DEVICE-DESCRI PTION :  Returns  the  entire  fact  field  pertaining  | 
to  a  particular  device.  j 

SIMILAR:  Matches  two  patterns.  It  also  sets  any  variable  be-  j 
ginning  with  "?"  in  one  pattern  to  its  corresponding  value  in  the  | 
other  pattern.  j 

RESTORE:  Restores  the  device's  status  to  "ok."  | 

GENERATE- AND-TEST :  Finds  new  gain  or  bias  by  trial  and  er-  j 
ror.  Currently  returns  "true"  for  all  calls.  j 

J 


6.  A  SAMPLE  RUN  OF  THE  EXPERT  SYSTEM 


The  following  pages  illustrate  some  examples  of  FDIES's  functionali¬ 
ty.  We  have  divided  the  output  roughly  into  three  columns.  The  first 
column  shows  the  operator  input  to  the  system.  The  second  one,  in 
which  each  entry  is  preceded  by  contains  the  response  from 

FDIES.  The  third  column  displays  comments  which  are  in  capital  letters 
and  are  preceded  by  "***." 

Three  different  kinds  of  failure  and  their  ramifications  are  analyzed. 
The  first  one  is  the  simple  case  of  a  device  (left  wing  tank)  being 
found  faulty  (Fig.  8).  In  this  situation,  FDIES  put  the  tank  on  the  ab¬ 
normal  device  list  and  declared  its  "link-to”  devices  (engine,  level-sen¬ 
sor)  as  "unusable."  The  second  one  (Fig.  9)  dealt  with  a  discrepancy 
in  readings  of  two  equivalent  devices  (airspeed-sensor-1  and  -2).  A 
check  with  their  analytical  equivalent  showed  that  sensor-2  was  faulty, 
so  FDIES  issued  an  alert  to  put  airspeed-sensor-2  on  the  abnormal  de¬ 
vice  list.  Finally  the  third  one  (Fig.  10)  was  concerned  with  a  device 
(left  wing  engine)  being  declared  abnormal.  Since  there  was  no  sup¬ 
porting  evidence  that  anything  else  was  wrong,  FDIES  placed  the  en¬ 
gine  on  the  abnormal  device  list. 
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Figure  TO:  Case  Ml:  Abnormal  Engine 


7.  CONCLUSIONS  AND  FUTURE  WORK 


An  expert  system  that  performs  fault  detection  and  displays  some  of 
the  features  of  fault  tolerance  has  been  developed.  The  former  is  ex¬ 
emplified  by  the  detection  and  identification  of  the  discrepancy  of 
equivalent  sensors;  the  latter  is  illustrated  by  the  choice  of  the  healthy 
sensor  in  face  of  the  discrepancy,  thus  avoiding  the  use  of  misleading 
data. 

In  light  of  these  results,  we  believe  that  our  work  has  demonstrated 
the  feasibility  of  a  fault-detection  expert  system,  that  it  assesses  the 
degree  of  difficulty  and  complexity,  and  that  it  provides  a  prototype  on 
which  future  systems  can  be  based. 

Looking  ahead,  there  is  a  great  deal  of  work  yet  to  be  done.  Nota¬ 
ble  is  the  addition  of  the  function  that  will  be  able  to  reconfigure  the 
aircraft's  control  system  so  as  to  minimize  the  effects  of  the  fault.  A 
prime  candidate  for  consideration  is  the  multiple-model-estimation  ap¬ 
proach.  Another  important  objective  is  to  imbed  in  the  system  the  ca¬ 
pability  to  write  new  rules  automatically  when  unknown  situations  are 
encountered.  This  belongs  to  the  area  of  machine  learning.  Finally,  we 
also  will  study  teaching  methodologies  that  will  enable  experts  to  aug¬ 
ment  our  knowledge  base  on  fault  detection.  Implementation  of  these  fa¬ 
cilities  will  bring  us  closer  to  truly  fault-tolerant  systems. 
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Appendix  A 
LIST  OF  DEVICES 

This  appendix  contains  a  list  of  devices  that  the  expert  system  cur¬ 
rently  recognizes. 

LEFT-WING:  airspeed-sensor-1  airspeed-sensor-2  static-pressure-sen¬ 
sor-1  static-pressure-sensor-2  aileron-1  aileron-2  actua- 
tor-1  actuator-2  tank  level-sensor-1  engine  temp-sensor 
rpm-sensor  pressure-sensor  batt-1-node  batt-2-node. 

RIGHT-WING:  static-pressure-sensor-1  static-pressure-sensor-2  ailer¬ 
on-1  aileron-2  actuator-1  actuator-2  tank  level-sensor-1 
engine  temp-sensor  rpm-sensor  pressure-sensor 
batt-l-node  batt-2-node. 

NOSE:  airspeed-sensor-1  airspeed-sensor-2  batt-1  batt-2  gyro-1.1 

gyro-1.2  gyro-1.3  gyro-2.1  gyro-2.2  gyro-2.3  accelero- 
menter-l  accelerometer-2  radar-1  antenna. 

TAIL:  engine  temp-sensor  rpm-sensor  pressure-sensor  rudder  ac- 

tuator-1  actuator-2  elevator-1  elevator-2  actuator-3  actua¬ 
tor-4  batt-1 -node  batt-2-node.  COCKPIT:  stick-1 

stick-2  pedal-1  pedal-2  radio-1  airspeed-ind-1  airspeed- 
ind-2  climb-rate-ind-1  climb-rate-ind-2  engines-rpm-ind-1 
engines-rpm-ind-2  manifold-pressure-ind-1  manifold-pres- 
sure-ind-2  engines-temp-ind-1  engines-temp-ind-2  atmos- 
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ROTOR: 


pheric-pressure-ind-l  atmospheric-pressure-ind-2  fuel- 
gauge-1  fuel-gauge-2  horizon-ind-l  horizon-ind-2  altitude- 
ind-1  altitude-ind-2  display-driver-1  display-driver-2 
A/DI -8  A/D9-16  A/D17-24  A/D25'32  batt-1-node 

batt-2-node. 

main-rotor  transmission  engine  tank  level-sensor-1  temp¬ 
sensor  rpm-sensor  pressure-sensor  swashplate 


batt-1  -node. 


Appendix  B 

THE  BULLETIN  DATABASE 


This  appendix  contains  the  complete  listing  of  the  dynamic  database 
currently  used  by  FDIES. 


(setq  bulletin 
'0®ft-wing 

((airspeed— sensor— 1  self  100.0  phys— equiv  100.0  analy— equiv  100.0) 

Iairspeed— sensor— 2  self  100.0  phys— equiv  100.0  analy-equiv  100.0) 
static-sensor-1  self  12.0  phys-equiv  12.0  analy-equiv  12.51 
8tatic-sensor-2  self  12.0  phys-equiv  12.0  analy-equiv  12.5) 
level-sensor— 1  self  1000.0) 
temp— sensor  self  500.0) 
rpm-sensor  self  10000.0) 
pressure— sensor  100.0) 
aileron-1  self  ok) 
aileron-2  self  ok) 
actuator— 1  self  ok) 
actuator-2  self  ok) 
tank  self  ok) 
engine  Ok) 

bait— 1— n^e  self  24.0) 
batt— 2— node  self  24. 0)) 
right-wing 

((static-sensor- 1  self  12.0  phys-equiv  120  analy-equiv  12.5) 

I  static-sensor-2  self  12.0  phys-equiv  12.0  analy-equiv  12.5) 
level-sensor- 1  self  1000. 0) 
temp-sensor  self  500.0) 
rpm-sensor  self  10000.0) 
pressure-sensor  100.0) 
aileron-1  self  ok) 
alleron-2  self  ok) 
octuator-1  self  ok) 
actuator-2  self  ok) 
tank  self  ok) 
engine  self  ok) 
ball-l-node  self  24.0) 
batl-2-node  self  24.0)) 
nose 

((airspeed— sensor— 1  self  100.0  phys-equiv  100.0  analy-equiv  100.0) 

I  airspeed-sensor-2  self  100. 0  phys-equiv  100.0  analy-equiv  100.0) 
balt-1  self  24.0) 
batl-2  self  24.0) 
gyro— 1.1  self  1.0) 
gyro-1.2  self  2.1) 
gyro-1.3  self  0.5) 
gyro— 2.1  self  1.0) 
gyro— 2.2  self  2.  l) 
gyro  2.3  self  0.5; 
antenna  self  ok) 
radar— 1  self  ok) 
accelerometer- 1  self  5  0) 
acceleromeler-2  self  2.0)) 
tail 

((temp- sensor  self  500  0) 

(rpm-sensor  self  10000.0) 

/pressure— sensor  self  lOO.O) 

/rudder  self  ok) 
elevator- 1  self  ok) 
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ielevatot^2  self  ok) 
actuator- 1  self  okl 
actuator— 2  self  ok) 
actuator-3  self  ok) 
actuator-4  self  ok) 
batt-l-node  self  24.0) 
batt-2-node  self  24.0;) 
cockpit 

((airspeed -ind—1  self  100.0  phys-equiv  100.0) 

I|air8peed-ind-2  self  100.0  phys-equiv  100.0) 
climb— rate— ind—1  self  0.5  phys-equiv  0.5l 
climb-rate-ind-2  self  0.5  phys-equiv  0.5) 

engines-rpm-ind-1  self  (10000.0  10000.0  10000.0)  phys-equiv  (lOOOO.O  10000.0  10000.0)) 

enfiines-rpm-ind-2  self  (lOOOO.O  10000.0  10000.0)  phys-equiv  (lOOOO  O  10000  0  10000.0)) 

manifold-pressure-ind-l  self  (100.0  lOO.O  100.0)  phys-equiv  (100.0  100.0  lOO.O)) 

’manifold-pressure-ind-2  self  (lOO.O  100.0  100.0)  phys-equiv  (lOO.O  ICW.O  100.0)) 

'engines-temp-ind-l  self  (500.0  500.0  500.0)  phys-equiv  (500.0  500.0  500.0)) 

engines-lemp-ind-2  self  (500.0  500.0  500.0)  phys-equiv  (500.0  500.0  500.0)) 

atmospheric-pressure-ind-1  self  11.5  phys-^uiv  11.5) 

atmospheric-pressiu-e-ind-2  self  11.5  phys-equiv  11.5) 

fuel-gauge- 1  self  1000.0  phys-equiv  1000.0) 

fuel— gauge-2  self  10(X)  0  phys-equiv  1000  0) 

altitude- ind— 1  self  1000.0  phys-equiv  1000.0) 

altitude— Ind— 2  self  1000.0  phys-equiv  1000.0) 

stick— 1  self  ok) 

stick— 2  self  ok) 

pedal— I  self  ok) 

pedal— 2  self  ok) 

radio- 1  self  ok) 

horizon-ind-1  self  ok) 

horizon-ind-2  self  ok) 

display-driver- 1  self  ok) 

display-driver-2  self  ok) 

A/D  1-0  self  ok) 

A/D9-16  self  ok) 

A/D17-24  self  ok) 

A/D15-32  self  ok) 
bait— 1— node  self  24.0) 
batl-2-node  self  24.0)) 
rotor 

((level— sensor- 1  self  lOOO.O) 

i temp-sensor  self  500.0) 
rpm-sensor  self  10000.0) 
pressure— sensor  self  100  0) 
engine  self  ok) 
swashplate  self  ok) 
main- rotor  self  ok) 
batt-l-node  self  24.0)) 
abnormal— devices 

~e3mmple  (section- name  device— name  status  (down,  faulty  or  new— alert)) 


Appendix  C 

THE  TIGER. DATA  DATABASE 


This  appendix  contains  the  static  database  declarations  which  are  made 
before  the  expert  system  is  run. 


~thia  file  contains  the  data  for  the  FDIES 


~fir8t  make  known  all  the  sections  of  the  airplane 
(sections  left-wing  right-wing  tail  nose  cockpit  rotor) 

^*«**«««********  left-wing  *•••••••••••♦• 


(device  airspeed— sensor— 1 
IN  left-wing 
((status  ok) 

(power-source  ball- 1-node) 
function  sensor) 
location  tip) 

I  jsame- location  (airspeed— sensor— 2  aileron— 1)) 
related- devices  (airspeed— sensor— 2)) 
I'linked-to  ((A/Dl))) 
physical— equiv  airspeed— sensor— 2) 

.analytical— equiv  if-needed— sensor))) 


(device  airspeed-sensor-2 
IN  left-wing 
((status  ok) 

I  power-source  batt-2-node) 
function  sensor) 
location  lip) 

same-location  (airspeed— sensor— 1  aileron— 1)) 
related-devices  (airspeed-sensor— 1)) 
linked— to  ((A/D2))) 
physical— equiv  airspeed-sensor- 1) 
analytical— equiv  if— needed— sensor))) 


(device  wlatic-pressure-sensor— 1 
IN  left-wing 
((status  ok) 

(power— source  batt-1— node) 
function  sensor) 
location  root) 

.same-location  (srtBtic-pres3urs-sensor-2  batt-l-node  bntt-2-node  level-sensor-l)) 

related— devices  (static— pressure— sensor— 2)) 

/linked-to  ((A/D3))) 

physical— equiv  static— pressure— sensor— 2) 
an^ytical -equiv  if-needed-3en3or2))) 


(device  static-pressure— sensor-2 
IN  left-wing 
((status  ok) 

(power— source  bait- 2-node) 
function  sensor) 
location  root) 

'  same— location  (static— pressure— sensoi — 1  ball- 1— node  bait— 2-node  tank  level— sensor— 1)) 
I  related— devices  (static— pressure— sensor— l)) 
linked— to  ((A/D4))) 

physical— equiv  static— pressure— sensor— 1) 

'  analytical- equiv  if— ne€ded-sensor2))) 
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(device  aileron— 1 
IN  left-wing 
((status  ok) 

(function  effector) 

'location  tip) 

same-location  (airspeed— sensor- 1  airspeed— sensor— 2)) 
related— devices  (actuator— 1  actuator- 2)) 

'linked— to  ((actuator— 1  actuator— 2))))) 

(device  aileron- 2 
IN  left-wing 
((status  ok) 

(funtion  effector) 

(location  middle) 

(same-location  (engine  temp-sensor  rpm-sensor  pressure-sensor  actuator- 1 
actuator— 2)) 

i  related -devices  (actuator- 1  actuator-2)) 
linked— to  ((actuator— 2))))) 

(device  nctuator-1 
IN  left-wing 
((status  ok) 

(power— source  batt— 1— node) 

'function  actuator) 
location  middle) 

same— location  (engine  temp-sensor  rpm— sensor  pressure— sensor  aileron-2 
actuator— 2)) 

(related-devices  (acluator-2)) 


(Unked-lo  ((stick-1  stick-2)  (aileron-1  aileron-2))) 

(physical-equiv  actuator-2))) 

(device  actuator-2 
IN  left-wing 
((status  ok) 

(power-source  batt— 2— node) 
function  actuator) 

I  location  middle) 

I  same— location  (engine  temp— sensor  rpm-sensor  pressure— sensor  aileron— 2 
actuator- ip 
^related— devices  (actuator— 1)) 

I  gain  10. 0) 

i|Unked— to  ((stick— 1  stick-2)  (aileron))) 

I  physical-equiv  actuator- 1))) 

(device  tank 
IN  left-wing 
((status  ok) 

(function  storage) 

(location  root) 

(same— location  (slaUc— pressure-sensor- 1  staticr-pressure-scnsor- 2 
level— sensor- 1  batt— 1— node  batt— 2— node)) 

i related— devices  (level-sensor-1)) 
linked-to  (0  (engine  level-sensor-l))))) 

(device  level— sensor— 1 
IN  left-wing 
((status  ok) 

(power— source  batt- 1— node) 

'function  sensor) 
location  root) 

same— location  (static:— pressure— sensor- 1  static— pressure-sensor-2  tank 
batt— 1-node  batt-2-node)) 

(linked-to  ((tank  A/D5))))) 
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IT- 


(device  engine 
IN  left-wing 
((status  ok) 

fpower— source  batt— 1— node) 

(function  propulsion) 

(location  middle) 

(same— location  (temp-sensor  rpm— sensor  pressure— sensor  aileron— 2  actuator— 1 
actuator— 2)) 

(linked— to  ((tank)  (temp-sensor  rpm-sensor  pressure— sensor))))) 

(device  temp— sensor 
IN  left-wing 
((status  ok) 

i power— source  batt— 1— node) 
function  sensor) 
location  middle) 

same— location  (engine  rpm-sensor  pressure— sensor  aileron— 2  actuator- 1  actuator— 2)) 
related— devices  (rmp— sensor  pressure— sensor)) 
linked— to  ((engine  A/D6))))) 

(device  rpm-sensor 
IN  left-wing 
((status  ok) 

i power— source  batt— 1— node) 
function  sensor) 
location  middle) 

same-location  (engine  temp-sensor  pressure -sensor  aileron-2  actuator-1  actuator-2)) 
related— devices  (temp— sensor  pressure— sensor)) 
iinked-to  ((engine  aA)7))))) 

AW 

(device  pressure— sensor 
IN  left-wing 
((status  ok) 

(power-source  batt— 1— node) 

(function  sensor) 

(location  middle) 

(same— location  (engine  rpm-sensor  pressure— sensor  aileron— 2  actuator— 1  actuBtor-2)) 
(related— devices  (temp-sensor  rpm-sensor)) 

(linked-to  ((engine  A/^8))))) 

(device  batt— 1-node 
IN  left-wing 
((status  ok) 

(function  battery) 

(location  root) 

(same— location  (slatic-pressure-sensor— 1  static-pressure-sensor- 2  tank 
level— ser^or—1)) 

(linked-to  ((batt-1)  (airspeed-sensor— 1  static— pressure-sensor— 1  actuator- 1 

engine  level-sensor— 1  temp-sensor  rpm-sensor  pressure— sensor))))) 

(device  batt-2-node 
IN  left-wing 
((status  ok) 

(function  battery) 

(same— location  (static-pressure-sensor— 1  static-pressure-sensor-1  tank 
level-ser^or-1)) 

(linked-to  ((batt-2)  (airspeed-sen3or-2  atatic-pressure-sensor-2  actuator-2))))) 

(device  inter- equiv 
OF  left-wing 
((batt— 1  (nose  batt— 1)) 

(batt— 2  (nose  bait— 2)) 

(A/Dl  (cockpit  A/Dl-8)) 

(A/D2  (cockpit  A/T)25-32)) 
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-•.j-. -f.’--. 


RIGHT-WING 


(device  static— pressure-sensor— 1 
IN  right-wing 
((status  ok) 

i power— source  bait- 1— node) 
function  sensor) 
location  root) 

same— location  (static— pressure— sensor— 2  batt— 1— node  batt— 2— node  tank  level-sensor-1)) 
related— devices  (static- pressure— sensor— 2)) 
linked— to  ((A/D3))) 

physical— equiv  static— pressure— sensoi — 2) 
anJylical-equiv  if-needed— sensor2))) 

(device  static— pressure— aensor—2 
IN  right-wing 
((status  ok) 

I  power— source  bait— 2-node) 
function  sensor) 
location  root) 

same— location  (static-pressure-sensor— 1  batt— 1— node  batt— 2— node  tank  level- sensoi — 1)) 
related— devices  (static— pressure— sensor— 1)) 
linked-lo  ((A/D4))) 

physical— equiv  static— pressure— sensor— 1) 
analytical— equiv  if— needed— sensor2))) 

(device  ailercu— 1 
IN  right-wing 
((status  ok) 

(function  effector) 

(location  tip) 

(same— location  (airspeed— aensor-2)) 

(related— devices  (actuator- 1  actuator-2)) 

(linked-to  ((actuator- 1  actuator-2))))) 

(device  aileron-2 
IN  right-wing 
((status  ok) 

(funtion  effeclorl 
(location  middle; 

(same— location  (engine  temp— sensor  rpm— sensor  pressure— sensor  actuator- 1 
actuator— 2)) 

irelated— devices  (actuator- 1  actuator— 2)) 
linked— to  ((actuator— 2))))) 

(device  actuator— 1 
IN  right-wing 
((status  ok) 

(power— source  batt- 1— node) 

(function  actuator) 

(location  middle) 

(same— location  (engine  temp-sensor  rpm-sensor  pressure-sensor  aileron— 2 
actuator-2p 
(related- devices  (actuator-2)) 

(gain  10.0) 

(linked-to  ((slick- 1  stick-21  (aileron-1  nileron-2))) 

(physical— equiv  acluBtor-2))) 

Ms 

(device  actuator- 2 
IN  right-wing 
((status  ok) 

(power-source  batl-2-node) 

(function  actuator) 

(location  middle) 


Jh. 


(same— location  (engine  temp— sensor  rpm— sensor  pressure-sensor  aileron— 2 
Bctuator-ip 
(related-devices  (actuator- 1)) 

(gain  10.0) 

ilinked-to  ((stick- 1  stick-21  (aileron))) 

(physical— equiv  actuator— 1))) 

(device  tank 
IN  right-wing 
((status  ok) 

(function  storage) 

(location  root) 

(same— location  (static— pressure— sensor— 1  static— pressure— sensor— 2 
level— sensor— 1  batt— 1— node  bait— 2-node)) 

! related— devices  (level-sensor-1)) 
linked— to  (0  (engine  level— sensor-l))))) 

(device  level— sensor— 1 
IN  right-wing 
((status  ok) 

(power— source  batt— 1— node) 

(function  sensor) 

(location  root) 

(same— location  (static— pressure— sensor— 1  static— pressure— sensor— 2  tank 
batt-l-node  batt-2-node)) 

(linked— to  ((tank  A/D5))))) 

(device  engine 
IN  right-wing 
((status  ok) 

(power— source  batt— 1— node) 

(function  propulsion) 

(locaUon  middle) 

(same-location  (temp-sensor  rpm-sensor  pressure-sensor  aileron-2  actuator- 1 
Bctuator-2)) 

(linked— to  ((tank)  (temp— sensor  rpm-sensor  pressure— sensor))))) 

(device  temp— sensor 
IN  right-wing 
((status  ok) 

i power— source  bait— 1— node) 
function  sensorl 
location  middle) 

same-location  (engine  rpm-sensor  pressure— sensor  Bileron-2  actuator-1  actualor-2)) 
related— devices  (rmp— serjor  pressure— sensor)) 
linked— to  ((engine  A/D6))))) 

(device  rpm-sensor 
IN  right-wing 
((status  ok) 

power— source  ball- 1 -node) 

I  function  sensor) 
location  middle) 

I  same— location  (engine  temp— sensor  pressure-sensor  aileron-2  actuator- 1  aclualor-2)) 
I  related- devices  (temp- sensor  pressure— sensor)) 

|linked-to  ((engine  A/^7))))) 

(device  pressure— senscr 
IN  right-wing 
((status  ok) 

(power— source  ball- 1— node) 

(function  sensor) 

(location  middle) 

(same— location  (engine  rpm-sensor  pressure— sensor  aileron— 2  actuator- 1  actuator- 2)) 
(related— devices  (temp-sensor  rpm-sensor)) 
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(linked-to  ((ez^gine  A/D8))))) 

(device  ball— 1— node 
IN  righl-wing 
((slalus  ok) 
ffunclioD  ballery) 
ilocallon  rool) 

(aame-localion  (atatics-pressure-sensor-l  ataUc-pressure-sensor-S  lank 
level— sensor- 1)) 

(linked-to  ((batl-1)  (atatic-pressure-aensor- 1  aclualor— 1 

•engine  level— sensor— 1  temp— sensor  rpm-sensor  pressure-sensor)) 

(device  ball -2— node 
IN  right-wing 
((status  ok) 

i function  battery) 

same— location  (static— pressure— sensor— 1  static:— pressure— sensor— 1  tank 
level— sensor—  1)) 

(linked-to  ((batl-2)  (airspeed-sensor-2  stalic-pressure-senaor-2  actuator-2))))) 

(de'vice  inter- equiv 
OF  right-wing 
((bait- 1  (nose  batt— 1)) 

ibatt— 2  (nose  bait— 2)) 

A/D3  (cockpit  A/Dl-8)) 

KAiA  (cockpit  A/D25— 32)) 

A/T)5  (cockpit  A/D  1—8)) 

A/l)6  (cockpit  A/D9— 16)) 

A/D7  (cockpit  A/D9-16)) 

A/D8  (cockpit  A/D9— 16)) 
stick-1  (cockpit  stick-l)) 

8tick-2  (cockpit  stick-2)))) 


NOSE  SECTION 


E-s'  - 


1/ V. 


i 

Cv^.i 

C%V 


(device  airspeed-sensor- 1 
IN  nose 
((status  ok) 

(power-source  batt— 1) 

(function  sensor) 

(same-location  (air8peed-sensor-2  balt-1  batt-2  gyro-1.1 

gyro- 1.2  gyro- 13  gyro— 2.1  gyro-2.2  gyro-2.3  accelerometer- 1 
accelerometer— 2  radar— 1  antenna)) 

(related— devices  (airspeed— sensor— 1)) 

(linked-to  ((A/Dl))) 

(physical— equiv  airpseed-sensor— 2) 

(an^ytical-equiv  if-needed-sensorl))) 


(device  air3peed-aenaor-2 
IN  nose 
((status  ok) 

(power-source  batt-2) 
function  r.ensor) 

(same-locaUcn  (airspeed— sensoi — 1  batt— 1  batt— 2  gyro— 1.1 

gyro- 1.2  gyro- 1.3  gyro-2.1  gyro-2.2  gyro-2.3  accelerometer- 1 
accelerometei — 2  radar— 1  antenna)) 

(related— devices  (airspeed— sensor— 1)) 

(linked-to  ((A/D2))) 

(physical— equiv  airspeed— sensor— 1) 

(analytical— equiv  if— needed— sensor  1))) 

(device  batt-1 
IN  nose 
((status  ok) 

f function  battery) 

same-location  (airspeed-sensor- 1  airapeed-sensor-2  batt-2  gyro-1.1 

gyro- 1.2  gyro- 1.3  gyro-2.1  gyro-2.2  gyro-2.3  accelerometer- 1 
accelerometer-2  radar-1  antenna)) 

(linked-to  (0  (batt-l-lwing  batt-l-rwing  batt-l-t^  batt-l-cockpit 

batt-l-rolor  airspeed-sensor- 1  gyro-1  accelerometer  radar-1))))) 

(device  batt-2 
IN  nose 
((status  ok) 

(function  battery) 

(same-location  (airspeed— sensor- 1  airspeed— sensor— 2  batt— 1  gyro— 1.1 

gyro- 1.2  gyro- 1.3  gyro-2.1  gyro-2.2  gyro-2.3  accelerometer- 1 
acceleroraeter-2  radar— 1  antenna)) 

(linked-to  (0  (batt-2-lwing  batt-2-rwitig  batt-2-tail  batt-2-cockpit 
nirspeed-sensor-2  gyro-2))))) 

(device  gyro- 1.1 
IN  nose 
((status  ok) 

(power-source  batt-1) 

‘function  sensorl 

same— location  (airspeed— sensor- 1  airspeed— sensor— 2  batt— 1  batt- 2 

gyro-1.2  gyro-1.3  gyro-2.1  gyro-2.2  gyro-2.3  accelerometer- 1 
accelerometer— 2  radar— 1  antenna)) 

'  related— devices  (gyro— 1.2  gyro-1.3)) 

'linked-to  ((A/D3))) 

.physical- equiv  gyro— 2.1))) 

(device  gyro— 1.2 
IN  nose 
((status  ok) 

(power-source  batt— 1) 
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'function  sensor) 

, same— location  (airspeed— sensor— 1  airspeed— sensoi^2  batt— 1  batt— 2  gyro— 1.1 
gyro- 1.3  gyro-2.1  gyro-2.2  gyro-2.3  accelerometer- 1 
BCcelerometer-2  radar-1  antenna)) 

[related— devices  (gyro— 1.1  gyro— 1.3)) 

*linked-to  ((A/D4))) 

[physical-equiv  gyro-2.2))) 


(device  gyro- 1.3 
IN  nose 
((status  ok) 
f power-source  batt-l) 
ifunction  sensor) 

(same— location  (airspeed-sensor— 1  airspeed— sensor— 2  batt— 1  batt— 2  gyro— 1.1 
gyro- 1.2  gyro-2.1  gyro-2.2  gyro-2.3  accelerometer- 1 
accelerometer— 2  radar— 1  antenna)) 

(related— devices  (gyro- 1.1  gyro— 1.2)) 
ilinked— to  ((A/D5]^) 

(physical-equiv  gyro-2.3))) 

(device  gyro-2.1 
IN  nose 
((status  ok) 
fpower-source  batt-2) 

(function  sensor) 

(same— location  (airspeed— sensor— 1  airspeed— sensor— 2  batt-l  batt— 2  gyro— 1.1 
gyro— 1.2  gyro— 1.3  gyro— 2.2  gyro— 2.3  accelerometer— 1 
accelerometer— 2  radar— 1  antenna)) 

(related-devices  (gyro-2.2  gyro— 2.3)) 

(linked-to  ((A/D6))) 

(physical-equiv  gyro-1.1))) 

(device  gyro-2.2 
IN  nose 
((status  ok) 

(power— source  batt— 2) 
i^function  sensor) 

I  same— location  (airspeed-sensor— 1  airspeed— sensor— 2  batt-l  batt— 2  gyro— 1.1 
gyro— 1.2  gyro— 1.3  gyro— 2.1  gyro— 2.3  accelerometer— 1 
accelerometer- 2  radar— 1  antenna)) 

(related-devices  (gyro-2.1  gyro— 2.3)) 

(linked-to  ((A/D7))) 

(physical-equiv  gyro- 1.2))) 

(device  gyro-2.3 
IN  nose 
((status  ok) 

(power— source  batt— 2) 

(function  sensor) 

(same— location  (airspeed-sensor— 1  airspeed— sensor— 2  batt-l  batt— 2  gyro— 1.1 
gyro- 1.2  gyro- 1.3  gyro-2.1  gyro-2.2  accelerometer- 1 
accelerometer— 2  radar— 1  antenna)) 

(related— devices  (gyro-2.1  gyro— 2.2)) 

(linked-to  ((A/D8))) 

(physical-equiv  gyro- 1.3))) 

(device  accelerometer— 1 
IN  nose 
((status  ok) 

(power— source  batt-l) 

(function  sensor) 

(same— location  (airspeed-sensor— 1  airspeed— sensor— 2  batt-l  batt-2  gyro— 1.1 
gyro-1.2  gyro-1.3  gyro-2.1  gyro-2.2  gyro-2.3 
accelerometer-2  radar— 1  antenna)) 

(related— devices  (acceleroraeter-2)) 


-  36  - 


(linked-to  {(A/D9))))) 


(device  acceleromeler-2 
IN  nose 
((status  ok)' 

(power— source  batt— 2) 

(function  sensor) 

(same— location  (airspeed— sensor- 1  airspeed— sensor-2  batt-1  batt— 2  gyro— 1.1 

gyro-1.2  gyro-1.3  gyro-2.1  gyro-2.2  gyro— 2.3  accelerometer- 1 
radar- 1  antenna)) 


(related- devices  (accelerometer— 1)) 
Unked-to  ((A/D  10))))) 


(device  radar- 1 
IN  nose 
((status  ok) 

^ower-source  batt-1) 
function  sensorl 

(same— location  (airspeed— sensor- 1  airspeed— sensor— 2  batt— 1  batt— 2  gyro— 1.1 

gyro— 1.2  gyro— 1.3  gyro— 2.1  gyro-2.2  gyro— 2.3  accelerometer— 1 
accelerometer— 2  antenna)) 

(linked-to  ((paraUel-input))))) 


(device  antenna 
IN  nose 
((status  ok) 

(function  communication) 

(same- location  (airspeed— sensor— 1  airspeed— sensor— 2  batt-1  batt— 2  gyro— 1.1 

gyro— 1.2  gyro— 1.3  gyro- 2.1  gyro— 2.2  gyro— 2.3  accelerometer- 1 
accelerometer-2  radar-1)) 

(linked-to  ((radio))))) 


(device  inter-equiv 

OF  nose 

((batt-l-lwing  (tail  batt-l-node)) 
(balt-l-rwing  (right-wing  balt-l-node)) 
'ibatt-l-tail  (tail  batt-l-node)) 
ibatt—l— cockpit  (cockpit  batt-l-node)) 
,batt-l-rotor  (rotor  balt-l-node)) 
ball- 2— Iwing  (tail  ball- 2— node)) 
batt— 2— rwing  (right-wing  batt-2-node)) 
batt— 2-tail  (tail  balt-2-node)) 
bait— 2— cockpit  (cockpit  bait— 2— node)) 
|A/^1  (cockpit  A/D9-16)) 

A/D2  (cockpit  A/D9— 16)) 

A/D3  (cockpit  A/D9— 16)) 

X/T)4  (cockpit  A/D9-16)) 

A/D5  (cockpit  A/D9— 16)) 
i  A/D6  (cockpit  A/D25— 32)) 

'A/D7  (cockpit  AA)25-32)) 

AA)B  (cockpit  A/D25— 32)) 

A/D9  (cockpit  A/D  17-24)) 

,A/D10  (cockpit  A/D17-24)) 

^radio  (cockpit  radio)) 

paraleU-input  (cockpit  parallel-input)))) 


TAIL  SECTION 


(device  engine 
IN  taU 
((status  ok) 

(power— source  ball- 1— node) 

(function  propulsion) 

(same- location  (temp— sensor  rpm— ser^sor  pressure— sensor  rudder  actualor-l 
acluator-2  actuator-3  actuator— 4)) 


i 


! related-devices  (temp-sensor  rpm-sensor  pressure-sensor)) 
iinked-to  ((tank)  (temp-sensor  rpm-sensor  pressure-sensor))))) 

(device  terop-sensor 
IN  tail 
((status  ok) 

Ipower-source  batt- 1-node) 
ifunction  sensor) 

(same-location  (engine  rpm-sensor  pressure-sensor  rudder  actuator- 1 
actualor-2  actuator-3  actuator-4)) 

i related— devices  (rpm-sensor  pressure— sensor)) 
linked-to  ((engine  A/Dl))))) 

(device  rpm-sensor 
IN  tail 
((status  ok) 

(power— source  batt— 1— node) 

(function  sensor) 

(same— location  (engine  temp— sensor  pressure— sensor  rudder  actuatoi — 1 
actuator- 2  actuator— 3  actuator— 4)) 

(related— devices  (temp— sensor  pressure— sensor)) 

(linked-to  ((engine  A.^2))))) 


(device  pressure-sensor 
IN  taU 
((status  ok) 

(power-source  batt- 1-node) 

(function  sensor) 

(same— location  (engine  temp— sensor  rpm-sensor  rudder  actuator— 1 
actuator-2  actuator-3  actuator-4)) 

(related- devices  (temp— sensor  rpm-sensor)) 
linked-to  ((engine  A>^3))))) 


(device  rudder 
IN  tail 
((status  ok) 

(function  effector) 

(same— location  (engine  temp-sensor  rpm-sensor  pressure-sensor  actuator- 1 
actuator-2  actuator-3  actuator-4)) 

(linked-to  ((actuator-1  actuator-2))))) 

(device  actuator-1 
IN  taU 


((status  ok) 

(power— source  batt— 1— node) 
nmetion  actuator) 
gain  10.0) 

same— location  (ermine  temp-sensor  rpra— sensor  pressure-sensor  rudder 
actuator-2  aclualor-3  actuator-4)) 

(linked-to  ((pedal-1  pedal-2)  (rudder))) 

(physical— equiv  actuator-2))))) 


(device  actuator-2 
IN  tail 
((status  ok) 

(power— source  batt— 2— node) 
function  actuator) 

'gain  10.0) 

same— location  (engine  temp-sensor  rpm-sensor  pressure— sensor  rudder 
actuator— 1  actuator— 3  actuator— 4)) 

(linked-to  ((pedal-1  pedal-2)  (rudder))) 

(physical-equiv  actuator- 1))))) 


(device  elevator-1 
IN  tail 
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((status  ok) 

Hocation  ri^ht) 

(function  effector) 

(linked-to  ((actuator-2))))) 

(device  elev''‘or-2 
IN  tail 
((status  ok) 
flocation  left) 

(function  effector) 

(linked— to  ((actuator-2))))) 

(device  actuator-3 
IN  tail 
((status  ok) 

(power-source  batt - 1  -node) 

(function  actuator) 

(gain  10.0) 

(same— location  (engine  temp— sensor  rpm— sensor  pressure— sensor  rudder 
actuator- 1  actuator— 2  actualor-4)) 

i linked— to  ((stick— 1  stick— 21  (elevator— 1  elevator— 2))) 
physical— equiv  actuator— 4))))) 

(device  actuator— 4 
IN  taU 
((status  ok) 

(power- source  batt— 2-node) 

(function  actuator) 

(gain  10.0) 

(same— location  (engine  temp— sensor  rpm— sensor  pressure— sensor  rudder 
actuator-1  actuator-2  actualor-3)) 

(linked-to  ((stick- 1  stick-2)  (elevator-1  elevator-2))) 

(physical-equiv  actuator-3))))) 

(device  batt-l-node 
IN  tail 
((status  ok) 

! function  battery) 

linked-to  ((batt— 1)  (actuator— 1  actuator— 3  engine  temp-sensor  rpm— sensor 

pressiwe-sensor))))) 

(device  batt— 2— node 
IN  tail 
((status  ok) 

{function  battery) 

linked-to  ((batt— 2)  (actuator— 2  actuator— 4))))) 

(device  inter— equiv 
OF  tad 

((batt-l-node  (nose  batt-1)) 

(batt— 2— node  (nose  batt— 2)) 

A/Dl  (cockpit  A/D  17-24)) 

I  A/D2  (cockpit  A/D  17-24)) 
i'A/D3  (cockpit  A/D17-24)) 
stick— 1  (cockpit  stick-1)) 
stick— 2  (cockpit  stick -2)) 
pedal— 1  (cocl^it  pedal- 1)) 

|pedal-2  (cockpit  pedal-2)))) 
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'  -  A.v.. A -V*. 


COCKPIT  SECTION 


(device  stick- 1 
IN  cockpit 
((status  ok) 

(function  control) 

(linked-to  (0  (actuator-1  actuator-2  actuator— S  actuator-4))) 
(physical-equiv  stick-2))) 

(device  stick— 2 
IN  cockpit 
((status  ok) 

(function  control) 

ninked-to  (0  (actuator-1  actuator-2  actuator— 3  actuator— 4))) 
(physical-equiv  stick- 1))) 

(device  pedal-1 
IN  cockpit 
((status  ok) 

(function  control) 

(linked-to  (Q  (actuator-5  actuator— 6))) 

(physical-equiv  pedal-2))) 

(device  pedal-2 
IN  cockpit 
((status  ok) 

(function  control) 

(linked-to  (()  (actuator— 5  actuator— 6))) 

(physical-equiv  pedal-1))) 

(device  radio- 1 
IN  cockpit 
((status  ok) 

(power-source  batt-l-node) 

(function  communication) 

(linked-to  (0  (antenna))))) 

(device  airspeed-ind-1 
IN  cockpit 
((status  ok) 

(power-source  batt-l-node) 
function  display) 

I  ^linked-to  ((display-driver))) 

I  physical-equiv  airspeed-ind-2))) 

(device  airspeed-ind-2 
IN  cockpit 
((status  ok) 

(power-source  batt-2-node) 

(function  display) 

(linked-to  ((display-driver-2))) 

(physical-equiv  airspeed-ind-l))) 

(device  climb— rate-ind-1 
IN  cockpit 
((status  ok) 

(power— source  batt-l-node) 

(function  display) 

(linked-to  ((display-driver-l))) 

(physical-equiv  climb-rate-ind-2))) 


(device  climb-rate-lnd-2 
IN  cockpit 
((status  ok) 

(power-source  batt-2-node) 
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flinked-to  ((dispIay-drlver-2))) 
(phyaical-equiT  atmospheric-pri 


(phyaical-equiT  atmospheric-preasxire-ind-l))) 

(de^ce  fuel-gau*e— 1 
IN  cockpit 
((atatua  ok) 

rpower-aource  bait- 1-node) 
function  display) 
linked-to  ((display-driver-l)lj 
phyaical-equiT  fuel-gauge-2})) 

(device  fuel-gauge-2 
IN  codq;>lt 
((atatua  ok) 


(device  horixon-ind-1 
IN  cockpit 
((atatua  ok) 

fpower-aoviree  batt-l-node) 
function  display) 
linked-to  ((display-drlver-l))) 
physical-equiv  horizon-ind-2))) 

(device  horizon-ind-1 
IN  cockpit 
((status  ok) 

(power-source  batt-2-node) 
(function  display) 

(linked-to  ((display-driver-2))) 
(physical-equiv  boriion-ind-l))) 

(device  alUtude-ind-1 
IN  cockpit 
((status  ok) 


(device  altitude-ind— 2 
IN  cockpit 
((status  ok) 


(device  display— dritei  -1 
IN  cockpit 
((status  ok) 

l^wer-aource  balt-l-node) 
function  driver) 

<  linked-to  ((••••a-lot  of  devices  ••••))) 

I  physical-equiv  display-driver-2))) 

(device  display— driver— 2 
IN  cockpit 
((status  ok) 

(power-source  batt-2-node) 

(function  driver) 

(linked-to  ((•••  a  lot  of  devices  •*•))) 
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•v 


, 

.V.vw 


-  .  •  .■'I 


(phyidcal-equlv  display-driver- 1))) 


(device  A/Dl-6 
IN  cockpit 
((status  ok) 

(power— source  batt— 1— node) 

(function  converter) 

(linked-to  {(sensor- 1  senaor-2  sensor— 3  sensor-4  sensor-5  sensor-fi  sensor-? 
sensor-6))))) 


(device  A/D9-16 
IN  cockpit 
((status  ok) 

(power  source  batt- 1— node) 

(function  converter) 

(linked-to  ((sensor-S  sensor-10  sensor-ll  setsor-lS  sensor— IS  sensor-14 
sensor— IS  sensor— 16))))) 

A# 

(device  A^17— 24 
IN  cockpit 
((status  ok) 

(power— source  batt— 1— node) 

(function  converter) 

(linked— to  ((sensor— 17  sensor— 18  sensor— 18  sensor— 20  sensor— 21  sensor— 22 
sensor-23  sensor-24))))) 

AS 

(device  A/D25-32 
IN  cockpit 
((status  ok) 

(power— source  batt-2-node) 

(function  converter) 

(linked-to  ((sen3or-25  serjor— 26  sensor-27  sensor-26  sensor-29  sensor-SO 
senaor-31))))) 

AM 

(device  batt— 1-node 
IN  cockpit 
((status  ok) 

(function  battery) 

(linked-to  ((balt-l)  (radio-1  airspeed-lnd— 1  climb-rate-lnd-l  fuel-gau£e-l 

engines— rpm—ind—l  manifold— pressure— ind  —  1 
engines— temp— ind—1  horizon— Ind-1  altitude— lnd—1 
display— driver- 1  A/^l-8  A/D9-16  A/D17-24))))) 

(device  batt-2-node 
IN  cockpit 
((status  ok) 

(linked— to  ((batt-2)  (airspeed-lnd -2  climb-rate-ind-2  fuel-gauge-2 

engine3-rpm-ind-2  manifold-pre3Sure-ind-2 
engines-temp-lnd-2  hori2on-ind-2  altitude— ind-2 
diiplay-driver-2  A/D25-32))))) 

(device  Inter-equlv 
OF  cockpit 

((batt-l  (nose  batt-1)) 
i|bott-2  (nose  balt-2)) 
i|Ocluetor— 1  (left-wing  actuator)) 
ycluBtor-2  (right-wing  actuator)) 

I  actuator-3  (tail  actuator- 1)1 
I  actuator— 4  (tail  actuator— 2)1 
lactuator- 5  (tail  actuator- 3;) 

/actuator— 6  (tail-actuator— 4)) 

I  sensor-1  (left-wing  airpseed-sensor-1)) 

'sensor-2  (left-wing  static— pressure-sensor- 1)) 

'sensor- 3  (left-wing  level-sensor- 1)) 
v*ensor-4  (left-wing  temp-sensor)) 
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tenaor-6  fleft-wing  rpm-«enaor)) 

•ensor-C  (left-wing  pressure-sensor)) 
sensor- 7  (right— static-sensor— 1)) 
sensor-8  (right-wing  level-sensor- 1)) 
sensor-9  (right-wii^  temp-sensor^) 
sensor-10  fright-w^  rpm-sensor)) 
sensor- 11  I  ^right-wing  pressure— sensor)) 
sensor— 12  I, nose  edrspeed-sensor— 1)) 
sensor-13  i  nosc  gyro-1)) 

Bensor-14  (nose  gyro-:lJ) 
sensor— 15  (nose  gyro-1)) 
sensor— 16  i^nose  accelerometer)) 
sensor— 17  (nose  accelerometer)) 
sensor-18  (tail  temp-sensor)) 
sensor-19  (tail  rpm-sensor)) 
sensor-20  (tail  pressure-sensor)) 

Bensor-2l  (  rotor  level-sensor- 1)) 

sensor-22  (rotor  temp-sensor)) 

sensor-23  l^rotor  rpm-sensor)) 

sensor— 24  (rotor  pressure— sensor)) 

sensor— 25  (left-wing  airspeed— sensor— 2)) 

sensor- 26  (left-wing  static— pressure— aensor—2)) 

sensor-27  i  right-wing  static-pressure-senaor-2)) 

sensor-28  i  nose  airspeed-pressure-8enaor-2)) 

8ensor-29  (nose  gyro— 2)) 

sensor-30  ('nose  gyro-2)) 

sensor-31  (nose  gyro-2)) 

antenna  (nose  antenna})}) 


UAIN-ROTOR  (HEUCOPTER  ONLY) 


(device  main— rotor 
IN  rotor 
((status  ok) 

(function  propulsion) 

(linked-to  ((transmission)))) 

(device  transmission 
IN  rotor 
((status  ok) 

(function  driver) 

(linked-to  ((engine)  (main— rotor))))) 

(device  engine 
IN  rotor 
((status  ok) 

(power-source  batt- 1-node) 

(function  propulsion) 

(linked— to  ((tank)  (transmission  temp— sensor  rpm— sensor  pressure— sensor))))) 

(device  tank 
IN  rotor 
((statiis  ok) 

(function  storase) 

(linked-to  (Q  (eE4;ine  level-aensor-1))))) 


(device  level-sensor— 1 
IN  rotor 
((status  ok) 

(power-source  batl-node-1) 
(function  serjor) 

(linked-to  ((tank  A/D5))))) 


(device  temp-sensor 
IN  rotor 
((status  ok) 

(power-source  batt- 1-node) 
(function  sensor) 

(linked-to  ((engine  A/D6))))) 


(device  rpm-sensor 
IN  rotor 
((status  ok) 

(power— source  batt— 1— node) 
(function  sensor) 

(linked-to  ((engine  A/D7))))) 


(de^ce  pressure-sensor 
IN  rotor 
((status  ok) 

(power-source  batt-l-node) 
I  function  sensor) 
linked-to  ((engine  A/D6))})) 


(device  swashplate 
IN  rotor 
((status  ok) 

! function  effector) 
linked-to  ((collective— stick))))) 


(device  batt-l-node 
IN  rotor 
((status  ok) 
(function  battery) 


(luiked-to  {(batl-1)  (enj^ne  Ievel-aensor-1  temp-aensor  rpm-»enaar 

pressure  —sensor))))) 

(device  inter-equlv 
OF  rotor 

((balt-1  (nose  batt-1)) 

(A/D5  (cockpit  A/D  17— 24)) 

I  A/D6  (cockpit  A/D  17-24)) 

A/D7  (cockpit  A/D  17-24)) 
i  A/D8  (cockpit  A/D33-40)) 

|collectlve-atick  (cockpit  collective— stick— 1) 

(cockpit  collective— atick-2)))) 
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Appendix  D 

PROGRAM  LISTING  OF  THE  RULES 


This  appendix  contains  the  source  listing  for  the  ten  rules  presently 
installed  in  the  FDIES. 


(rules  rule#l 

IF  (down  ?device) 
THEN  (mark— device  ( 


(rules  rule)?2 


IF 
THEN 


(faulty  ?device) 


'down)) 

'faulty)) 

IF 

e. 

THEN 

(ndes  nde#3 

IF  (different  ?device  reading) 

~  from  its  physical  equivalent  is  implicit 

THEN  .(prog  (temp-then  section  devicel 

fsetq  section  (car  ?device)) 
setq  device  (cadr  ?device)) 

M.he  device  must  have  analytical  equivalent 

(cond  {(null  (setq  temp— then  section  device  'analy— equiv))) 

(print  "(no  analytical  equiv  present...  rule#3  failed^) 

~If  it  does  then  check  to  see  to  which  reading  it  is  equal. 

(t  (cond  ((same  (look-up  section  device  'self)  temp-then) 
(mark-device  section 

(retrieve  section  device  'physical-equiv)  'faulty)) 
((same  (look-up  section  device  'phys— equiv)  temp-then) 
(mark-device  section  device  'faulty)) 

(t  (print  '(no  readings  are  the  same...  rule#3  failed)))))))) 


(rules  rule#4 

IF  (different  ?device  behavior) 
THEN  (generate— and-test  ?device)) 


77/i^ 


(rules  rule#5 

IF  (abnormal  ?device  reading) 

THEN  (prog  (other-devices  device— list) 

~first  find  the  other  devices  in  the  same  location 

(setq  other— devices  (retrieve  (car  ?device)  (cadr  ?device)  'same-location)) 

~If  every  device  is  on  the  abnormal  list  then  apply  rulejj^S 

(setq  device-list  other— devices) 

loop 

(cond  ((null  device-list) 

(return  (eval  '(use— rule  rule|8 

(common  .(cons  ?device  other— devices)  location))))) 
((null  (on— abnormal— list  (list  (car  ?device)  (car  device— list)))) 

(return  (eval  '(use— rule  ruJcj^ 

(abnormal  ,?device  reading  not— seme— loc))))) 

(t  (setq  device-list  (cdr  device-list)))) 

(go  loop))) 


(ndes  rule#€ 

IF  (abnormal  ?device  reading  not— same— loc) 

THEN  ^rog  (other— devices  device— list) 

(setq  other— devices  (retrieve  (car  ?device)  (cadr  ?device)  'related— devices)) 
"'first  check  if  there  are  related  devices.  Most  of  cases  it  will. 

'~If  not  apply  rule#? 

(cond  ((null  other-devices) 

(return  (eval  '(use— rule  rule|7  (abnormal  ,?device  readir.g  no— related) 
(setq  device— list  othei — devices) 


-  47  - 


...THEN 


loop 

~all  devices  on  the  list  must  be  abnormal  list  to  declare  that 
~all  related  devices  faulty. 

(cond  ((null  de^^ce-lisl) 

(retoni  (eval  '(use— rule  rulejjlB 

(abnormal  .(cons  ?device  other-devices)  related -dev^ 
((null  (on— abnormal— list  (list  (car  ?device)  (car  device-list)))) 

(return  (eval  '(use— rule  rule#?  (abnormal  ,?device  reading  no— related) 
(t  (setq  device-list  (cdr  device-list)))) 

(go  loop))) 


(rules  rule#7 

IF  (abnormal  ?device  reading  no— related)  Jr 

~if  airplane's  behavior  is  also  abnormal,  something  serious  is  happening 
~so  many  other  rules  will  take  care  of  the  situation.  Ignore  the  ^ert  for  now 
THEN  (cond  ((on-abnormal-list  'airplane— behavior))  TiJEN 

~otherwise  declare  the  device  faulty. 

(t  (issue-alert  '(faidty  .?device))))) 


(niles  rule#8 


IF  (common  ?device  ?commonality) 

THEN  (do  ((device -list  ?device  (cdr  device— list)) 

(a— device  (car  ?device))) 

~after  all  devices  have  been  declared  faulty,  report  the 
~nature  of  the  problem. 

((null  device-list) 

(cond  ((equal  ?commonality  'location) 

(setq  temp  (list  (car  a— device) 

(retrieve  (car  a— device)  (cadr  a— device)  'location))) 
(print  '(structviral  damage  in  .(car  a-device)  .temp))) 

((equal  ?comraonality  'related) 

(print  '(these  related  devices  are  down;  ,?dev1ce))))) 

^sue  alert  for  each  of  the  devices. 

(issue-alert  '(faulty  .(car  device-lis'.))))) 


(rules  rule#9 

IF  (check  ?device  ?value) 

THEN  (prog  (temp) 

(setq  temp  (car  ?device)) 

~first  check  if  the  device  is  in  the  cockpit 
(cond  ((not  (equal  'cockpit  temp)) 

(return  (print 

'(check  command  must  refer  to  a  device  in  the 
~then  check  if  the  device  is  in  bulletin 
((null  (setq  temp  (look-up  temp  (cadr  ?device)  'self))) 
(return  (print  '(carmot  check  the  device  in  question)))) 
'■''finally  check  if  the  value  is  the  same  as  reported. 

((same  ?value  temp) 

(return  (print  '(.?device  is  OK)))) 

'miark  fa^ty  if  fails 

(t  (issue— alert  '(faulty  ,?device)))))) 


cockpit)))) 


(rules  nile|10 

IF  (normal  ?device)  —-.JlF. 

THEN  (restore  ?device))  THEN 


'“Put  the  rule  number  on  the  property  list 

idefprop  down  (rule#!)  rule-number) 
defprop  faulty  (rulejjli)  rule-number) 
defprop  different  (rulejPS  rule#4)  rule-number) 
defprop  abnormal  (rule#5)  rule— number) 
defprop  common  (rule#8)  rule-number) 
defprop  check  (rule#9)  i^e- number) 
defprop  normal  (rulejjflO)  rule-number) 
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Appendix  E 

THE  FDIES  SOURCE  CODE 


This  appendix  contains  the  complete  program  listing  for  the  FDIES.  It 
includes  the  main  procedure  FDIES  as  well  as  all  the  available  utility 
procedures.  Short  comments  on  the  purpose  of  each  routine  are  given 
in  the  beginning  of  each  major  file. 


~  This  file  cx)nlains  executive  procedure  to  run  the  FDIES 
plus  a  few  routines. 


»><fdies:  this  Is  the  top-level  executive  routine 

^reporter:  checks  the  bulletin  for  abnormalities  and  issue  proper  alerts. 

~my— gc;  •  removes  niFs  from  the  abnormal— devices  list. 

^auxiliary  functions:  used  to  retrieve  data  from  the  bulletin. 

~iasue-alert:  places  the  alert  on  either  the  high-priority  or  priority  stack, 

'wpush;  pushes  an  element  on  a  stack. 

M^op:  pops  an  element  of  a  stack. 

<-ttpply— rules:  finds  and  applies  correct  rule  to  the  alert  in  question, 

“mse-rule:  the  routine  that  actually  does  the  rule-application. 


(defun  fdies  () 

(prog  (message  lop— alert) 

'•'first  some  preliminaries 

faetq  message  '(you  are  in  input— mode.  To  run  FDIES  type  ”p")) 
(setq  high-p— stack  nil) 

(setq  p-stack  nil) 

loop-1 

(terpr) 

(print  '(no  (more)  alerts  present))  (terpr) 

^rint  '(to  quit.,  type  q.  Otherwise  hit  return))  (terpr) 


~Quit? 

(cond  ((equal  'q  (readc))  (return  'done))) 

•'otherwise  sit  in  pause  until  the  operator  is  ready 
(pause  message) 

~first  check  if  there  is  any  abnormalities 

(reporter) 

loop-2 

'*'Any  new  alerts? 

(setq  top-alert  (pop  'high-priority)) 

(cond  ({null  top-alert)  (bond  ((null  (setq  top-alert  (pop  'priority))) 

(go  loop-1))))) 


~if  yes  apply  the  rulesl 
(apply-rules  top-alert) 
Uo  loop-2))) 


(defun  reporter  0 

(do  ((news  bulletin  (cddr  news)) 

(section)) 

((null  news)) 

••section  name  is  usually  the  first  item 
(setq  section  (car  news); 

~is  it  the  abnormal -devices  list?  If  yes  take  care  of  it. 


(cond  ((equal  section  'abnormal-devices) 

(do  ((device-list  (cadr  news)  (cdr  device-list))) 

((null  device-list)) 

~is  this  item  a  new  alert? 

(cond  ((equal  'new-alert  (get -abnormal-status  (car  device -list))) 

~If  yes.  issue  the  alert.  Otherwise  do  nothing 

(setq  section  (gel— abnormal— ?device  (car  device— list))) 

(issue-alert  '(“bhormal  .section  reading)) 

~Once  alert  is  issued  remove  it  from  the  abnormal  list. 

(nilaca  device— list  nil))))) 

**if  this  is  a  section  name,  check  for  differences 
(t  (do  ((device— list  (cadr  news)  (cdr  device— list)) 

(phys— equiv-value)  (self— value)) 

((null  device— list)) 

~does  a  physical  equivalent  exist?  If  no  do  nothing 
(cond  ((null  (setq  phys— equiv-value  (gel— p— equiv  (car  device— lisl))))) 
~are  they  numbers.  If  no  do  nothing  as  well 
((null  (and  (numbp  (setq  self— value  (gel-s— value  (car  device— list)))) 
(numbp  phys— equiv— value)))) 

'‘Otherwise  check  if  self— value  and  equiv  value  are  same 
'“If  yes  do  nothing.  If  no  issue  alert. 

(t  (cond  ((same  self— value  phys— equiv— value)) 

(t 

(issue-alert  '(different  .(list  section 

(get— d— name  (car  device— list))) 
reading))))))))))) 

(defun  my-gc  () 

(do  ((news  bulletin  (cddr  news))) 

!(null  news)) 

cond  ((equal  (car  news)  'abnormal— devices) 

(return  (rplaca  (cdr  news)  (remove  nil  (cadr  news)))))))) 

"Some  auxiliary  functions 

(defun  eel— abnormal-status  (a— lisl) 

(car  (reverse  a-lisl))) 

(defun  gel— abnormaI-?device  (a-lisl) 

(reverse  (cdr  (reverse  a-lisl)))) 

(defun  get— p-equiv  (a-lisl) 

(cadr  (member  'phys— equiv  e-list))) 

(defun  gel— s— value  (a-lisl) 

(cad£'  a-list)) 

(defun  gel— d— name  (a— list) 

(car  a-list)) 

(defun  issue— alert  (exp) 

(prog  (temp) 

(setq  temp  (car  exp)) 

'"check  to  see  if  the  alert  is  that  of  high-priority  type 
(cond  ((or  (equal  temp  'down)  (equal  temp  'faulty)) 

yes  push  the  alert  onto  the  high-priority  stack 
(retuxn  (push  exp  'high-priority))) 

^otherwise  push  il  on  the  priority  stack 
(t  (return  (push  exp  'priority)))))) 

(defun  push  (value  stack— name) 

^check  to  see  which  stack  is  to  be  used 

(cond  ((equal  slack-name  'high-priority)  (setq  high— p— slack  (cons  value  high-p— slack))) 

(t  (setq  p-slack  (cons  value  p-slack))))) 
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(defun  pop  (stack-name) 

~check  which  of  the  stack  the  value  must  be  popped. 

(cond  ((equal  stack-name  'high-priority) 

(progl  (car  high-p-stack) 

(setq  Wgh-p-stack  (cdr  high-p— stack)))) 

(t  (progl  (car  p-atack) 

(setq  p-stack  (cdr  p-stack)))))) 

(defun  apply-niles  (alert) 

~flnd  out  what  niles  are  applicable 

(do  ((starting— rules  (get  (car  alert)  'rule-number)  (cdr  starting- rules)) 

(?device)  (?common^ity)  (?value)) 

*df  no  rules  do  nothing 
((null  starting— rules)) 

•^apply  use— rules  iteratively  until  all  rules  are  exhausted. 

(evaJ  '(use-nde  .(car  starting-rules)  .alert)))) 

(defmacro  use-rule  (rule#  alert) 

'"'first  check  if  the  rule  is  applicable 
(cond  ((similar  (get  rule#  'if)  alert) 

''df  so  get  the  then  part  and  evaluate  it  on  the  return  (due  to  macro) 
(gel  rule#  'then)) 

(t  (print  '(.rule#  does  not  apply))))) 


'-list  of  files: 


'lections: 

*-18— section: 
'-mark-device: 


''mark: 

~gel-new-seclion: 


makes  FDIES  aware  of  sections  being  dealt. 

checks  to  see  if  an  element  is  part  of  section  database  already, 
marks  device  as  well  as  those  on  the  linked— to  list  to 
whatever  status  specified, 
or  unusable. 

used  by  mark-devices  to  accomplish  its  goal 
gets  the  section  that  the  device  really  belongs  to. 


(declare  special  frames) 
setq  frames  ()) 

(defun  sections  macro  (exp) 

^example  (sections  left-wing  right-wing  tail  ....) 

(do  ((temp  (cdr  exp)  (cdr  tem^)) 

((null  temp)  ''  .frames) 

•"'check  if  the  section  is  known  already.  If  not  add  the  the  global  frames 
(cond  ((null  (is— section  (car  temp)))  (setq  frames  (cons  (car  temp)  frames))) 
•"•otherwise  report  existence  and  continue 
(t  (print  '(.(car  temp)  is  already  known)))))) 

(defim  is -section  (xl) 

(cond  ((member  xl  frames)  t) 

(t  0))) 


(defun  mark— device  (section  device  value) 

•formal  is  (mark-devices  left-wing  aileron  down) 

(let  ((temp  ())  (value— 1  'ok)  (value— 2  'ok)) 

—first  check  if  the  given  section  and  device  exist.  If  they  don't 
"•do  nothing.  If  they  do  set  temp  to  the  value  of  linked— to  slot. 

(cond  ((null  (setq  temp  (is-present— 1  section  device  'linked-lo)))) 
•“Now  iteratively  change  the  status  of  the  devices. 

—first  add  the  device  on  abnormal-devices  list. 

(I  (cond  ((not  (eoual  value  'ok)) 

(eval  '(add— abnormal— devices  .section  .device  .value)) 
(setq  value- 1  'broken— link) 

(setq  value— 2  'unusable))) 

—then  change  its  status  on  the  bulletin  and  database. 

(eval  '(change— bulletin  .section  .device  self  .value)) 
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(eval  '(change  .section  .device  status  to  .value)) 

~fiiially  mark  the  devices  on  the  first  list  of  linked-to  devices 
~oa  broken-link 

(mark  section  (caar  temp)  value— 1) 

~and  the  devices  on  the  second  list  as  unusable. 

(mark  section  (cadar  temp)  value-2))))) 

(defun  mark  (current-section  device-list  new-status) 

(do  ((tempi  device— list  (cdr  templl) 

(section-temp)  (device-temp)) 

((null  tempi)) 

(setq  device-temp  (car  tempi)) 

'^cneck  if  the  device  is  in  another  section.  If  so  change 
Mhe  current  section  temporarily. 

(cond  ((member  device-temp  (get— all— devices  current— section)) 

(setq  section— temp  current— section)) 

(t  (setq  section— temp  (get— new— section  current— section  device— temp)))) 
(eval  '(change  .section-temp  .device— temp  status  to  .new— status)) 

(eval  '(change-bulletin  .section-temp  , device-temp  self  .new-status)))) 

(defun  get— new— section  (section  device) 

(cadar  (find-value  (get  section  'inter— equiv)  device))) 


•“list  of  files 


•“device:  specifies  the  characteristics(facts)  of  a  device.  The  facts 

•“  are  attached  to  the  property  list  of  the  section  under 

~  the  name  of  the  device. 

•“change:  changes  the  value  of  the  facts  known. 

•“find-value:  finds  the  value  of  the  given  slot. 

•“what-is:  returns  the  value  of  the  fact  presently  in  the  system. 

•Tretrieve:  same  as  what-is  except  not  a  macro. 

•“add-fact:  apppends  additional  facts  about  a  particular  device. 

““is— present— 1:  checks  the  presence  of  given  section,  device  and  slot.  If 

~  true  returns  the  slot  as  specified.  Otherwise  returns  nil. 

•“is-present- 2:  checks  the  presence  of  given  section  and  device.  If  true 

*“  returns  the  facts  associated  with  the  device. 

"add-value:  add  value  to  the  existing  slot  given  the  section  and  device, 

•“device— description:  returns  the  "frame"  or  description  of  the  device  given, 
•“get— all— devices:  returns  all  devices  attached  to  the  section. 


(defraacro  device  (device— name  in  section— name  facts) 

"example  (device  engine  IN  right-wing  (facts)) 

•“simply  put  on  the  property  Ust  of  the  section. 

'(defprop  .section— name  .facts  .device— name)) 

(defmacro  change  (section  device  slot  to  value) 

"example  (change  left-wing  airpseed -sensor— 1  status  to  down) 
(prog  (temp) 

"now  make  sure  that  the  section,  device  and  slot  are  known 
(cond  ((null  (setq  temp  (is-present— 1  section  device  slot)))) 
"if  they  are  make  the  change. 

(t  (return  ''  .(rplaca  temp  value)))))) 

(defun  find— value  (facts  slot) 

•“example  (find-value  (specs)  status) 

(do  ((temp  facts  (cdr  temp)) 

(tempcar)) 

((null  temp)) 

•Yset  tempcar  to  the  first  item  in  the  fact  list 

isetq  tempcar  (car  temp)) 

cond  ((equal  (car  tempcar)  slot)  (return  (cdr  tempcar)))))) 
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{defmacro  what— is  (section  device  slot) 

~example  (what— is  left-wing  engine  linked— to) 

"  .(car  (find— value  (get  seotion  device)  slot))) 

(defun  retrieve  (section  device  slot) 

(car  (find— value  (get  section  device)  slot))) 

(defmacro  add-fact  (section  device  fact) 

~example  (add-fact  tail  engine  (some  useful  spec)) 

(let  ((temp  ())) 

"check  if  the  section  and  device  exist.  If  yes  retrieve  the  facts 
(cond  ((null  (setq  temp  (is-present— 2  section  device)))) 

"now  check  if  the  new  fact  is  already  present.  If  so  warn  the  user 
((find— value  temp  (car  fact))  (print  "(fact  already  exists  Try  change  or  add— value))) 
"if  alright  try  add  the  new  fact 
(t  .(nconc  temp  (list  fact)))))) 

(defun  is— present— 1  (section  device  slot) 

"call  is— present— 2  which  checks  if  section  and  device  are  present 
(prog  (temp) 

(cond  ((null  (setq  temp  (is— present— 2  section  device)))) 

i(null  (setq  temp  (find-value  temp  slot)))  (return  (print  '(no  such  slct)))) 
t  (return  temp))))) 


(defun  is-present-2  (section  device) 

"first  check  if  section  is  present 

(cond  ((null  (is— section  section))  (print  '(no  such  section))) 

"check  if  device  is  known.  If  so  return  the  facts  associated  with  it. 
((get  section  device)) 

"otherwise  print  warning. 

(t  (print  '(no  such  device))))) 

(defmacro  add-value  (section  device  slot  value) 

"example  (add-value  cockpit  airspeed-ind-1  linked-to  airspeed-sensor- 1) 

Oet  ((temp  ())) 

"now  check  if  section,  device  and  slot  ore  present  If  not  print  warning 
(cond  ((null  (setq  temp  (is-present— 1  section  device  slot)))  (print 
'(value  cannot  be  added  to  a  nonexisting  slot))) 

"if  they  do  then  destructively  append  the  new  value. 

(t  *'  .(nconc  (car  temp)  (list  value)))))) 

(defun  device- description  macro  (exp) 

"example  (device— description  tail  rudder) 


(device  (caddr  exp))) 
i(6el  section  device))) 

(defun  get— all-devices  (section) 

"example  (get-all— devices  cockpit) 

"first  set  templist  to  entire  property  list  of  the  section 
(do  ((templist  fplist  section)  (eddr  templist)) 

(answer  ())) 

((null  templist)  answer) 

"now  form  the  list  containing  just  the  devices 
(setq  answer  (cons  (car  templist)  answer)))) 


"list  of  files 
"rules: 

"similar: 

"check— list: 


inserts  rules  on  the  property  list  according  to  their 
rule  number. 

Checks  whether  two  patterns  are  similar.  Has  side— effect 
of  setting  variables  preceded  by  ?  to  proper  values, 
used  by  "similar"  to  check  two  lists  few  similarity. 


"change— bulletin:  command  used  to  make  changes  on  the  bulletin. 


^generate— and— test:  right  now  does  nothing.  Supposed  to  find  if  a  device  can 
~  be  salvaged  by  a  different  gain  or  bias. 

~look-up:  looks  up  the  entry  specified  in  the  database 

^restore:  restores  the  device's  condition  to  normal  (or  ok) 

~8ame;  compares  two  values  Return  true  if  they  are  within  10%  of 

~  the  larger  value. 

~add— abnormal— devices:  used  in  monitor  mode  to  add  new  abnormal  alerts  on  the 
^  bulletin. 

~on— abnormal— list:  checks  if  the  device  given  is  on  the  abnormal— devices  list. 

(defmacro  rules  (rule— number  if  if— part  then  then— part) 

~example  (rules  rule|l  if  (whatever  premises)  then  (whatever  conclusions)) 

(putprop  rule-number  if-part  'if) 

'(de^rop  .rule-number  .then-part  then)) 

(defvm  simileir  (pattern  match) 

^example  (similar  (some  stored  pattern)  (other  pattern  being  matched)) 

(do  ((p  attern— temp  pattern  (cdr  pattern— temp)) 

(match— temp  match  (cdr  match— temp)); 

~stop  when  nothing  is  left  to  be  compared 
((and  (null  pattern— temp)  (null  match— temp))  t) 

““check  each  element 

(cond  ((check— list  (car  pattern— temp)  (car  match— temp))) 

(t  (return  nil))))) 

(defun  check— list  (one  two) 

““example  (check-list  '(1  2  3)  '(1  2  (3  4))) 

*“if  both  are  null  lists  return  true. 

(cond  ((and  (null  one)  (null  two))  t) 

““otherwise  are  they  identical  atoms? 

((atom  one)  (cond  ((equal  one  two)) 

““does  the  first  atom  begin  with  '  .  .  If  so  set  them  =. 

((equal  '?  (car  (explode  one)))  (set  one  two)) 

‘“otherwise  return  nil 
(t  nil))) 

““if  not  atoms  recurse  on  their  sub-lists 
(t  (and  (check-list  (car  one)  (car  two)) 

(check— list  (cdr  one)  (cdr  two)))))) 

aw 

(defmacro  change-bulletin  (section  device  type  new— value) 

““example  (change  left-wir.g  airpseed-sensor— 1  self  100  0) 

(do  ((temp-bulletin  bulletin  (cddr  temp-bulletin))) 

((null  temp-bulletin)  (print  '(no  such  section  name))) 

““first  match  the  section 

(cond  ((equal  section  (car  temp-bulletin)) 

““if  found  match  the  device 

(return  (do  (ftemp-device  (cadr  temp-bulletin)  (cdr  temp-device))) 

((null  temp-device)  (print  '(no  such  device  name))) 

(cond  ((equal  device  (caar  temp— device)) 

“rif  found  match  the  type 
(retium 

(do  ((temp-type  (cdar  temp-device)  (cddr  temp-t^e))) 
((null  temp-type)  (print  '(no  such  type  name))) 
(cond  ((equal  type  (car  temp-type)) 

~if  found  replace  the  associated  value 

(return  ''  .(rplaca  (cdr  temp-type)  new-value))))))) 

(defun  generate— and— test  macro  (exp) 

““do  nothing 
t) 

(defun  look— up  (section-name  device-name  type) 

(do  ((news  bulletin  (cddr  news)) 

(temp)) 

“^f  no  entry  found,  return  nil 


((null  news)  nil) 

"“Otherwise  look  for  it! 

(cond  ((equal  (car  news)  section-name) 

(return  (do  ((deviceTlist  (cadr  news)  (cdr  device— list))) 

"“again  if  the  entry  is  not  found,  return  nil 
((null  device-list)  (return  nil)) 

~same  section.  &id  the  matching  device  name! 

(cond  ((equal  (get— d— name  (car  device— list))  device-name) 
"“Found  it!  return  the  value.  Otherwise  do  nothing, 
(return  (cadr  (member  type  (car  device— list))))))))) 

(defun  restore  (section— device) 

"“first  remove  the  device  from  the  abnormal- devices  list 

(do  ((device— list  (cadr  (member  'abnormal— devices  bulletin))  (cdr  device— list))) 

"“if  the  device  is  not  found,  do  nothing 
((null  device-list)) 

"“Otherwise  set  the  entry  to  nil  which  will  be  removed  later  by  a 
"“garbage-collector-like  procedure. 

(cond  ((equal  section- device  (gel— abnormal-?device  (car  device-list))) 

(rplaca  device-list  ())))) 

“*Tiow  change  the  status  of  the  device  in  the  bulletin  and  in  the  database. 

(mark— device  (car  section— device)  (cadr  section— device)  'ok)) 

(defun  same  (value-1  value— 2) 

““if  equal  then  they  are  certainly  the  same. 

(cond  ((equal  value- 1  value— 2)  t) 

"“otherwise  it  better  be  within  10%  of  the  larger  one. 

((grealerp  value- 1  value-2) 

^ealerp  0.1  (quotient  (diff  value-1  value-2)  value-1))) 

(t  (grealerp  0.1  (quotient  (difi  value-2  value- 1)  value-2))))) 

(dcfniacro  add-abnormal-devices  (section  device  status-quo) 

(prog  (device -list) 

(selq  device-list  (cadr  (member  'abnormal-devices  bulletin))) 

(return  '*  .(nconc  device-list  (list  (list  section  device  status-quo)))))) 


(defun  on-abnormal -list  (section— de^.ce) 

(do  ((a-list  (cadr  (member  'abnormal-devices  bulletin))  (cdr  a-list))) 
it  is  not  on  the  abnormal— devices  list,  return  nil 
((null  a-list)  nil) 

““check  each  entry  for  equality.  Return  true  if  found,  otherwise  keep  looking, 
(cond  ((null  (car  a-list))) 

((equal  (get— abnormal-?device  (car  a-list))  sec  Jon— device) 

(return  t))))) 


